Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/7rCdRbLq6hIcfsQnA303r_W7D30.roa
File: 7rCdRbLq6hIcfsQnA303r_W7D30.roa (raw, json)
Hash identifier: erc0IzcRLIFTs6Qge/GkDnIJ6SiitmFUuwWwrs3G+Xw=
Subject key identifier: EE:B0:9D:45:B2:EA:EA:12:1C:7E:C4:27:03:7D:37:AF:F5:BB:0F:7D
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F23684A8220C73BBEBF12874879EBACB8
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/7rCdRbLq6hIcfsQnA303r_W7D30.roa
Signing time: Thu 02 Jul 2026 15:17:45 +0000
ROA not before: Thu 02 Jul 2026 15:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212815
IP address blocks: 91.209.71.0/24 maxlen: 24
185.171.202.0/24 maxlen: 24
2a10:4640::/32 maxlen: 32
2a10:4645::/32 maxlen: 32
2a10:4646:50::/44 maxlen: 44
2a10:4646:170::/44 maxlen: 44
2a10:4646:240::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:4a:82:20:c7:3b:be:bf:12:87:48:79:eb:ac:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eeb09d45b2eaea121c7ec427037d37aff5bb0f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:ba:c1:88:51:23:94:89:2f:51:63:ba:84:
5e:c2:da:df:90:76:d0:12:92:af:f2:6e:6a:4e:b3:
1e:4e:d7:53:83:23:bf:57:35:0e:0b:9e:67:fa:80:
4d:c8:4e:d0:fb:a3:84:78:2d:56:9a:ab:16:69:75:
21:53:b8:ae:79:fb:c6:bc:9d:85:6f:3a:ed:97:a1:
00:b9:10:41:a5:f3:65:4a:56:61:ef:c3:9b:c0:73:
7f:2d:18:c6:c7:eb:35:ce:73:2d:de:2f:96:7d:b9:
22:29:77:41:4b:b4:4e:21:c7:f0:11:1a:2c:a1:42:
81:0c:77:5d:8a:d0:3b:9a:08:17:9d:29:47:1b:bf:
da:52:0f:ff:1a:d6:9f:cb:5f:a8:05:a1:6a:99:e9:
27:e9:42:22:6d:b8:15:7e:c7:0a:00:87:9f:75:58:
7c:52:4c:61:b6:bc:55:eb:bc:b1:d9:c2:c3:44:19:
a2:66:fe:17:23:5e:b1:05:f3:d0:06:ac:28:91:76:
f3:4f:da:9c:55:46:a3:4b:25:17:ff:7a:23:44:58:
16:3d:ec:c1:d3:75:df:d4:33:96:cb:9c:11:d0:b2:
03:16:98:31:36:44:01:04:4d:b5:f8:2e:50:8d:61:
4e:c9:f0:4c:98:0d:0c:b1:d0:8e:5f:80:2b:0f:8b:
07:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B0:9D:45:B2:EA:EA:12:1C:7E:C4:27:03:7D:37:AF:F5:BB:0F:7D
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/7rCdRbLq6hIcfsQnA303r_W7D30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.71.0/24
185.171.202.0/24
IPv6:
2a10:4640::/32
2a10:4645::/32
2a10:4646:50::/44
2a10:4646:170::/44
2a10:4646:240::/44
Signature Algorithm: sha256WithRSAEncryption
2f:97:86:78:ac:3b:0f:4c:4a:b6:2b:86:f2:90:ac:e7:7b:0a:
cb:75:22:18:d1:a7:81:93:b1:48:de:07:aa:d8:60:0f:87:7f:
4b:65:2e:f4:bb:c0:02:eb:48:ca:93:00:04:66:37:c5:77:aa:
66:ad:3c:54:5d:ef:48:92:b6:e7:c9:a6:c3:17:38:db:6d:2f:
37:c7:89:94:71:76:d4:43:ed:db:c4:ed:f5:f7:52:d3:75:7a:
c5:75:16:ea:11:96:14:d0:0e:77:ab:20:3d:67:d9:e1:1e:ab:
4f:44:b3:06:50:78:d3:75:09:b3:58:e0:d3:41:44:d2:38:1d:
ba:5d:30:ce:90:98:11:db:8a:2c:5c:4c:d9:5c:a8:dc:32:ab:
ca:db:31:49:ef:07:10:02:3e:e9:fe:80:2e:ac:96:7b:66:ce:
15:3b:6e:47:33:f8:d2:87:a5:a7:2c:3c:90:de:83:71:c5:00:
28:4b:54:de:ba:ff:4e:7c:89:26:60:6b:7b:41:cd:55:34:68:
ec:9f:c5:42:64:9a:6f:a3:85:8b:88:7b:9b:3a:bb:ff:6e:f3:
9d:54:46:b5:45:4d:13:a7:46:bf:5f:fa:5e:fe:51:f9:d8:dd:
99:42:6f:3a:a4:5f:f1:63:23:9d:d0:57:17:de:80:12:44:4e:
c6:17:59:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 15:59:43 2026 by rpki-client